Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-94757

test Sanity/ausearch-checkpoint fails due checkpoint problem of the corrupted file

Linking RHIVOS CVEs to...Migration: Automation ...RHELPRIO AssignedTeam ...SWIFT: POC ConversionSync from "Extern...XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done
    • Icon: Undefined Undefined
    • None
    • rhel-9.6
    • audit
    • None
    • rhel-security-special-projects
    • ssg_security
    • 1
    • False
    • False
    • Hide

      None

      Show
      None
    • None
    • SECENGSP Cycle 21
    • None
    • None
    • Unspecified
    • Unspecified
    • Unspecified
    • x86_64, aarch64
    • None

      What were you trying to do that didn't work?
      The test repeatedly fails even there were multiple adjustments and fixes in the test itself or in the component.

      What is the impact of this issue to you?

      This test causes some troubles in the CTC/RC testing, right now it's the failure in the RHIVOS FuSa testing

      Please provide the package NVR for which the bug is seen:

      audit-3.1.5-4.el9.x86_64
      audit-3.1.5-4.el9.aarch64

      How reproducible is this bug?:

      Steps to reproduce

      1. git clone git@gitlab.cee.redhat.com:special-projects/tests/audit.git
      1. tmt --context distro=rhel-9.6 run -a provision -h connect -g <MACHINE_IP> -u root -p <MACHINE_PASSWD> plans --default tests -n Sanity/ausearch-checkpoint execute -h tmt --interactive -vvv

      Expected results

      :: [ 19:41:49 ] :: [ BEGIN ] :: Generating message test4 :: actually running 'auditctl -m test4 && sleep 5'
      :: [ 19:41:54 ] :: [ PASS ] :: Generating message test4 (Expected 0, got 0)
      :: [ 19:41:54 ] :: [ BEGIN ] :: Moving checkpoint 2, test4 should be reported :: actually running 'ausearch -ts recent --checkpoint chk2 -m USER'
      Corrupted checkpoint file. Inode match, but newer complete event (1748461309.313:14395) found before loaded checkpoint 1748461304.885:14392
      :: [ 19:41:54 ] :: [ PASS ] :: Moving checkpoint 2, test4 should be reported (Expected 0)
      :: [ 19:41:54 ] :: [ PASS ] :: File '/var/tmp/rlRun_LOG.QqpC8H3F' should contain 'test4'

       

      Actual results

      :: [ 19:41:49 ] :: [  BEGIN   ] :: Generating message test4 :: actually running 'auditctl -m test4 && sleep 5'
      :: [ 19:41:54 ] :: [   PASS   ] :: Generating message test4 (Expected 0, got 0)
      :: [ 19:41:54 ] :: [  BEGIN   ] :: Moving checkpoint 2, test4 should be reported :: actually running 'ausearch -ts recent --checkpoint chk2 -m USER'
      Corrupted checkpoint file. Inode match, but newer complete event (1748461309.313:14395) found before loaded checkpoint 1748461304.885:14392
      :: [ 19:41:54 ] :: [   FAIL   ] :: Moving checkpoint 2, test4 should be reported (Expected 0, got 12)
      :: [ 19:41:54 ] :: [   FAIL   ] :: File '/var/tmp/rlRun_LOG.QqpC8H3F' should contain 'test4'  

              rh-ee-alakatos Attila Lakatos
              rh-ee-aprikryl Adam Prikryl
              Attila Lakatos Attila Lakatos
              Adam Prikryl Adam Prikryl
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

                Created:
                Updated:
                Resolved: